Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft
File:                     9UWcujH5M_kHO1FMnLvsNPbtLko.mft (raw, json)
Hash identifier:          /Q6JshQ2hUg/ZzruCUcg9UQJJi7y20Rb1tL6uknT6bQ=
Subject key identifier:   2B:9D:20:EB:B3:D2:E7:03:25:84:CD:39:5A:55:E7:55:7A:5A:3E:6F
Authority key identifier: F5:45:9C:BA:31:F9:33:F9:07:3B:51:4C:9C:BB:EC:34:F6:ED:2E:4A
Certificate issuer:       /CN=A91C0E6A/serialNumber=F5459CBA31F933F9073B514C9CBBEC34F6ED2E4A
Certificate serial:       026F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft
Manifest number:          0257
Signing time:             Mon 27 Jul 2026 03:55:36 +0000
Manifest this update:     Mon 27 Jul 2026 03:55:35 +0000
Manifest next update:     Mon 03 Aug 2026 03:55:35 +0000
Files and hashes:         1: 9UWcujH5M_kHO1FMnLvsNPbtLko.crl (hash: pS6QwLulcOHlwZ+HD7u5glTW50KPAuN9hxRN5DvVG34=)
                          2: 7641B9AE12CD11EFAC15BB64C4F9AE02.roa (hash: zX2wxhpVdTYgnBLbUW2HFAPDNMT7jIK2t1BaorSnmuA=)
                          3: 57CB703EBCED11F0A3B2C039C4F9AE02.roa (hash: 45hyCfM+o4HKQEPHEPnA/AUjri6G28j6JkHXuLahCZI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.crl
                          rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 03:55:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 623 (0x26f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0E6A, serialNumber=F5459CBA31F933F9073B514C9CBBEC34F6ED2E4A
        Validity
            Not Before: Jul 27 03:55:35 2026 GMT
            Not After : Aug  3 03:55:35 2026 GMT
        Subject: CN=6a66d6b7-f12c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6d:fc:7f:2b:55:e5:16:a1:bb:54:76:1a:82:
                    53:b2:88:b2:c3:ba:d9:de:81:0e:60:74:4b:b4:da:
                    4c:d1:aa:0a:85:68:81:b3:21:b0:ab:2c:28:72:10:
                    a2:9d:49:08:df:75:be:e0:f4:61:47:02:ee:ec:f7:
                    34:07:01:3a:68:ea:52:67:9d:a6:de:74:1e:59:2a:
                    e8:a5:06:bd:70:09:36:65:c3:03:40:29:42:50:51:
                    d0:e7:28:0e:22:2f:a6:84:84:61:aa:82:c5:27:99:
                    5b:1a:3b:ee:d6:56:fe:d8:dc:42:26:d9:dc:49:41:
                    c0:eb:f8:7c:53:c5:26:14:2f:60:26:09:43:e1:c6:
                    3e:f1:9c:49:ee:1a:f4:f9:d5:7f:8b:78:3a:c1:2c:
                    2f:29:76:48:3d:8b:bd:d2:ac:62:a5:49:4f:e1:32:
                    93:56:99:21:53:0a:88:ce:2b:20:33:4f:b3:d5:d3:
                    c4:fe:5a:c9:29:b7:71:46:8a:46:13:2e:fd:7c:38:
                    4d:83:38:0f:84:38:d6:4d:34:e1:37:ab:e9:6a:77:
                    47:96:8b:1f:4c:17:ab:49:46:16:8f:29:c1:8f:76:
                    c7:e7:f0:86:d5:ea:3a:5c:8c:c7:97:f9:25:5a:b1:
                    be:4a:90:c2:14:c4:32:fd:41:be:52:02:00:72:dc:
                    8d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:9D:20:EB:B3:D2:E7:03:25:84:CD:39:5A:55:E7:55:7A:5A:3E:6F
            X509v3 Authority Key Identifier:
                keyid:F5:45:9C:BA:31:F9:33:F9:07:3B:51:4C:9C:BB:EC:34:F6:ED:2E:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:c6:f3:48:1f:1b:98:90:7d:44:3b:63:c8:3b:a0:94:97:90:
         ac:88:24:4d:14:09:4c:33:5f:25:bf:13:3b:2a:26:ae:61:ab:
         4c:35:37:67:48:a6:4b:d8:3d:61:b1:c9:19:de:79:38:93:b7:
         d1:4b:50:2a:bb:07:f9:41:6a:e0:e8:2a:bc:ec:03:83:57:31:
         e2:e8:6c:08:9f:da:27:3c:98:71:58:43:c3:18:cb:c3:9d:25:
         09:09:10:c7:d1:6d:0a:fb:34:4b:80:96:ec:94:75:f8:45:db:
         17:92:b0:d6:fe:af:24:38:4e:38:6d:b8:c9:a8:b6:0d:e6:3e:
         9d:60:ec:bb:11:dd:04:b8:7b:76:2e:0d:eb:b8:02:8e:e2:7e:
         47:0e:0e:0a:d5:36:db:20:dc:70:39:0a:a4:2c:34:4f:69:be:
         0c:9e:25:ac:d7:0d:0e:ae:ee:e5:32:a3:2f:cb:ae:f6:1b:fe:
         90:e6:6b:24:bf:ad:f6:06:75:a5:9a:11:d3:1f:63:a4:4c:7c:
         96:53:09:02:52:7b:b1:64:b3:22:c3:f6:6c:57:0f:c2:c3:76:
         f6:6f:a8:30:ea:72:05:ee:d0:d8:66:58:9f:4b:a2:69:7f:e0:
         92:e7:0e:90:f6:ef:a1:98:07:83:6c:96:c3:c4:1c:b6:70:68:
         7d:43:88:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:20:09 2026 by rpki-client